35574 2003-12-10 23:10 0000 Including support for Trusted Platform Modules (TPM) to Gentoo via the IBM drivers and TSS stack. 2005-02-03 03:18:03 0000 1 1 1 Unclassified Gentoo Linux Hardened unspecified x86 Linux RESOLVED FIXED http://www.research.ibm.com/gsal/tcpa/ P2 enhancement --- 1 gentoobugzilla@digitasaru.net henrik@brixandersen.dk beejay@gentoo.org evan@alt3r.com latexer@gentoo.org gentoobugzilla@digitasaru.net 2003-12-10 23:10:46 0000 Please review the URL listed above and the Linux Journal article, "Take Control of TCPA" (http://www.linuxjournal.com/article.php?sid=6633). It provides an overview of why including support for the TPM is important, addresses misconceptions regarding it, provides the GPLed/BSD-licensed source code to the TPM driver (GPL) and preliminary interface library (BSD) to the driver. The Linux Journal article provides an overview of the entire system. This could be a real boon for security, and I'd like to see it included as an option in Gentoo. The TPM could be a USE flag, as I believe there are projects such as grub which include patches or could be patched to take advantage of the existance of a TPM. Reproducible: Always Steps to Reproduce: 1. 2. 3. solar@gentoo.org 2003-12-11 23:04:21 0000 Joseph, From a quick read/review of the url it sounds like special hardware is required. I'm not aware of anybody that has this type of hardware, so here is the deal. We cant/wont add anything to portage which can cant test and verify that it works. If you can find a way for us to test/verify that this works then it will be considered. gentoobugzilla@digitasaru.net 2003-12-12 05:54:03 0000 My new laptop (whenever it gets here) will have such hardware. I have contacted the vendor of the TPM, and at least the project manager would like to help make it work under Linux. Thus, I could help test. solar@gentoo.org 2004-01-27 18:00:53 0000 Any new news on this bug Joseph? Gentoo devs still dont have this kinda hardware. gentoobugzilla@digitasaru.net 2004-01-28 09:35:50 0000 Sorry. After HP dropping the ball waaaay too many times, I went with a Dell home system, which has no TPM. Sorry! You might contact Infineon to see if they'll help. I know IBM is working on it. They would be glad to get any help you may provide, and you may get hardware from either or both of them. Sorry I can't be of help anymore. HP sucks, I guess. klieber@gentoo.org 2004-03-29 07:43:59 0000 updating component. henrik@brixandersen.dk 2004-08-30 08:43:25 0000 I own an IBM ThinkPad X31 which has a TCPA chip. I'd be happy to look into this more and help testing. latexer@gentoo.org 2004-08-30 08:45:54 0000 My T30 (whenever it gets back from being repaired) also has a TPM chip in it. I've gotten the driver working under 2.6 before with some mild hacking of the driver (quite a few months ago). I'd also be interested in this work. henrik@brixandersen.dk 2004-08-30 08:50:44 0000 http://www.prosec.rub.de/trusted_grub.html has some information about a TPM enabled GRUB. solar@gentoo.org 2004-09-08 18:22:30 0000 Well we still lack the hardware to support this. Bouncing back to bug-wranglers. henrik@brixandersen.dk 2004-09-10 01:39:20 0000 *** Bug 62673 has been marked as a duplicate of this bug. *** henrik@brixandersen.dk 2005-01-18 02:50:12 0000 Created an attachment (id=48822) app-crypt/tpm-2.0.ebuild This is an updated ebuild for the IBM TPM driver. dragonheart@gentoo.org 2005-02-03 03:18:03 0000 added app-crypt/tpm-module and sys-libs/libtpm - Thanks Henrik Brix Andersen <brix@NOHATEMAIL.gentoo.org> Drivers added. Recruitment underway. 48822 2005-01-18 02:50 0000 app-crypt/tpm-2.0.ebuild tpm-2.0.ebuild text/plain IyBDb3B5cmlnaHQgMTk5OS0yMDA1IEdlbnRvbyBGb3VuZGF0aW9uCiMgRGlzdHJpYnV0ZWQgdW5k ZXIgdGhlIHRlcm1zIG9mIHRoZSBHTlUgR2VuZXJhbCBQdWJsaWMgTGljZW5zZSB2MgojICRIZWFk ZXI6ICQKCmluaGVyaXQgbGludXgtbW9kCgpNWV9QPSR7UC90cG0vVFBNfQpTPSR7V09SS0RJUn0K CkRFU0NSSVBUSU9OPSJEcml2ZXIgYW5kIHV0aWxpdGllcyBmb3IgVFBNIGNoaXBzIgoKSE9NRVBB R0U9Imh0dHA6Ly93d3cucmVzZWFyY2guaWJtLmNvbS9nc2FsL3RjcGEvIgpTUkNfVVJJPSJodHRw Oi8vd3d3LnJlc2VhcmNoLmlibS5jb20vZ3NhbC90Y3BhLyR7TVlfUH0udGFyLmd6IgoKTElDRU5T RT0iR1BMLTIiClNMT1Q9IjAiCktFWVdPUkRTPSJ+eDg2IgoKSVVTRT0iIgoKUkRFUEVORD0iZGV2 LWxpYnMvb3BlbnNzbCIKCkJVSUxEX1BBUkFNUz0iS0RJUj0ke0tWX0RJUn0iCkJVSUxEX1RBUkdF VFM9ImRlZmF1bHQiCgpNT0RVTEVfTkFNRVM9InRwbShjcnlwdG86JHtTfS8ke1B9KSIKCnNyY191 bnBhY2soKSB7Cgl1bnBhY2sgJHtBfQoKCWNvbnZlcnRfdG9fbSAke1N9LyR7UH0vTWFrZWZpbGUK fQoKc3JjX2NvbXBpbGUoKSB7CglsaW51eC1tb2Rfc3JjX2NvbXBpbGUKCgljZCAke1N9L2xpYiR7 UH0KCWVjb25mIHx8IGRpZSAiZWNvbmYgZmFpbGVkIgoJZW1ha2UgfHwgZGllICJlbWFrZSBmYWls ZWQiCn0KCnNyY19pbnN0YWxsKCkgewoJbGludXgtbW9kX3NyY19pbnN0YWxsCgoJY2QgJHtTfS9s aWIke1B9CgllbWFrZSBERVNURElSPSR7RH0gaW5zdGFsbCB8fCBkaWUgImVtYWtlIGluc3RhbGwg ZmFpbGVkIgoKCWRvZG9jIEFVVEhPUlMgQ2hhbmdlTG9nIE5FV1MgUkVBRE1FCn0K